xgboost.dll is not code signed, if we package it with our code it might upset the windows defender. Can we code sign the xgboost dll from our code singing cert to bypass this situation.
XGBoost.dll is not signed
Yes you may, XGBoost follows the Apache license, so you are free to copy and redistribute the code freely.